Hi All,
We have buildAuthenticationRequest[1] wrapped within our sso client js
module. Noticed following error after enabling sso with signature
validation,
WARN
{org.wso2.carbon.identity.sso.saml.processors.SPInitSSOAuthnRequestProcessor}
- Destination validation for Authentication Request failed. Received: [
*null*]. Expected one in the list: [https://localhost:9443/samlsso
<https://www.google.com/url?q=https%3A%2F%2Flocalhost%3A9443%2Fsamlsso&sa=D&sntz=1&usg=AFQjCNFEktbwY50oRm419Cu2qmnUw2Z_vw>
]
Seems we have to set other properties like destination etc.. within SAML
request inorder to support signature validation. @Darshana please confirm.
Found buildSignedAuthRequest[2] within APIM SSO hostobject which supports
this. Have we encounted this problem during ES/UES testing previously?
[1]
https://github.com/wso2/jaggery-extensions/blob/master/sso/resources/org.jaggeryjs.modules.sso/src/main/java/org/jaggeryjs/modules/sso/common/builders/AuthReqBuilder.java#L38
[2]
https://github.com/wso2/carbon-apimgt/blob/8e5b065f3149d75e9eea3d63fe3f68b24503e6b4/components/sso-hostobject/org.wso2.carbon.hostobjects.sso/src/main/java/org/wso2/carbon/hostobjects/sso/internal/builder/AuthReqBuilder.java#L83
--
Regards,
UdaraR
_______________________________________________
Dev mailing list
Dev@wso2.org
http://wso2.org/cgi-bin/mailman/listinfo/dev
